$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146577.roa File: AS146577.roa (raw, json) Hash identifier: h0cLXcheXmft981vLLIcaZZx12PfUbTtkwhaqyA0OvU= Subject key identifier: 35:88:49:21:00:42:0F:BD:11:3E:64:6A:9F:51:51:DC:8A:D9:8D:A7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 36C4D3905AA53F7687B89736C6D5717854D7BFF2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146577.roa Signing time: Wed 04 Mar 2026 06:39:19 +0000 ROA not before: Wed 04 Mar 2026 06:34:19 +0000 ROA not after: Wed 03 Mar 2027 06:39:19 +0000 asID: 146577 IP address blocks: 240a:af57::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c4:d3:90:5a:a5:3f:76:87:b8:97:36:c6:d5:71:78:54:d7:bf:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:34:19 2026 GMT Not After : Mar 3 06:39:19 2027 GMT Subject: CN=3588492100420FBD113E646A9F5151DC8AD98DA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0d:ba:6a:5a:65:75:71:af:e1:7f:66:0b:db: 34:98:81:01:af:87:98:d3:83:ac:87:73:f0:23:ff: 02:a1:4d:c6:df:60:fb:34:a0:0b:17:25:0f:ce:e0: 9f:67:69:e1:fc:58:92:96:c6:42:35:e4:52:be:0b: 3f:5a:11:8e:f7:2e:96:12:fe:cf:f5:7a:d8:d6:e0: 85:ba:41:c1:bf:ba:fb:39:0c:b5:c7:0d:7e:48:42: 41:5f:92:65:b9:ad:f3:af:df:e0:83:a2:8f:12:b4: 93:c6:cf:91:60:ee:2b:95:79:91:5a:0f:9f:7d:07: 40:75:53:8d:0e:7d:9f:d9:a5:dd:cd:d4:3e:b3:b0: d4:7a:25:77:b7:83:c1:04:8b:db:c9:f5:fb:c8:24: b8:c3:eb:7e:0b:35:52:3f:0f:b8:3b:5f:87:6e:4f: 2f:76:84:9a:42:d0:31:4e:3f:ba:d2:ad:61:f1:d9: 73:7a:82:4f:50:2c:44:d6:a0:b5:fd:f8:b8:28:5b: 84:85:e5:07:a1:0f:27:df:dd:40:7e:ca:2f:fb:d2: f3:6e:91:c4:df:74:4f:09:b3:e2:37:32:1e:03:37: 52:59:53:df:b7:3e:02:0a:9b:26:ae:6a:3a:4d:d0: 1a:5e:b1:a5:f8:38:fa:75:cb:af:97:4d:56:f6:0c: 2b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:88:49:21:00:42:0F:BD:11:3E:64:6A:9F:51:51:DC:8A:D9:8D:A7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146577.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:af57::/32 Signature Algorithm: sha256WithRSAEncryption 06:e6:77:9c:17:25:e6:b4:31:6a:4b:81:ac:af:22:de:df:e8: 7e:a0:3d:37:44:e5:d9:11:75:55:fa:80:68:a7:fe:e5:90:68: 94:96:70:1c:52:8e:f2:86:98:d8:64:7e:7b:89:41:e8:e5:72: 44:cc:a9:00:d8:58:e7:4f:9e:f0:18:f3:49:45:89:89:7c:dc: 06:da:e4:6c:9e:b2:43:99:d3:38:ec:58:2f:52:1f:44:46:26: 94:b0:58:a4:ca:e3:57:15:c2:9a:ed:83:2f:ae:19:04:04:b3: 1c:09:bd:48:97:2d:36:ac:a8:41:2c:9b:6a:79:75:31:d9:b7: 1c:e2:c2:28:73:28:ba:91:82:b5:ff:e9:e6:bf:86:5d:d3:f1: 61:7b:fd:dc:cd:ff:7d:f6:fb:fd:56:4b:ef:e4:4f:34:96:8f: 38:37:46:71:bc:43:e8:da:da:bd:20:b9:b6:98:96:9f:42:1d: 4b:27:e0:41:ad:a9:9b:51:c8:cc:5d:47:a9:22:01:71:05:7a: 04:f3:2c:cb:97:28:b3:75:de:75:1e:6f:64:65:9e:67:7c:90: 92:2e:e1:95:33:d1:13:92:bc:94:5c:48:72:5f:c9:91:fb:a0: fa:94:a7:bc:0a:30:b4:2d:77:b3:6c:db:44:be:4c:02:69:dc: c3:ee:be:77 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNsTTkFqlP3aHuJc2xtVxeFTXv/IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MzQxOVoX DTI3MDMwMzA2MzkxOVowMzExMC8GA1UEAxMoMzU4ODQ5MjEwMDQyMEZCRDExM0U2 NDZBOUY1MTUxREM4QUQ5OERBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUNumpaZXVxr+F/ZgvbNJiBAa+HmNODrIdz8CP/AqFNxt9g+zSgCxclD87g n2dp4fxYkpbGQjXkUr4LP1oRjvculhL+z/V62NbghbpBwb+6+zkMtccNfkhCQV+S Zbmt86/f4IOijxK0k8bPkWDuK5V5kVoPn30HQHVTjQ59n9ml3c3UPrOw1Hold7eD wQSL28n1+8gkuMPrfgs1Uj8PuDtfh25PL3aEmkLQMU4/utKtYfHZc3qCT1AsRNag tf34uChbhIXlB6EPJ9/dQH7KL/vS826RxN90Twmz4jcyHgM3UllT37c+AgqbJq5q Ok3QGl6xpfg4+nXLr5dNVvYMK/0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ1iEkh AEIPvRE+ZGqfUVHcitmNpzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjU3Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK r1cwDQYJKoZIhvcNAQELBQADggEBAAbmd5wXJea0MWpLgayvIt7f6H6gPTdE5dkR dVX6gGin/uWQaJSWcBxSjvKGmNhkfnuJQejlckTMqQDYWOdPnvAY80lFiYl83Aba 5GyeskOZ0zjsWC9SH0RGJpSwWKTK41cVwprtgy+uGQQEsxwJvUiXLTasqEEsm2p5 dTHZtxziwihzKLqRgrX/6ea/hl3T8WF7/dzN/332+/1WS+/kTzSWjzg3RnG8Q+ja 2r0gubaYlp9CHUsn4EGtqZtRyMxdR6kiAXEFegTzLMuXKLN13nUeb2Rlnmd8kJIu 4ZUz0ROSvJRcSHJfyZH7oPqUp7wKMLQtd7Ns20S+TAJp3MPuvnc= -----END CERTIFICATE-----Generated at Sat Mar 28 13:11:27 2026 by rpki-client